NEAS[.]035b4464a51009844495feab94717160_JC[.]exe | Triage

Sharing

General

Target

NEAS.035b4464a51009844495feab94717160_JC.exe
Size

118KB
MD5

035b4464a51009844495feab94717160
SHA1

566473b6a296a953384b73386ce4b002a203bb59
SHA256

233efb449838c5f3356aab4daaea76aa783df2e3809c83350b1dbd907afa5544
SHA512

3765fcd198b16973d65f1913cfc359375705aad66f86e8084113ed21b3af0011de3226a1e6cdb19d271717c013b90caca27d764bb02f194ff825546c1e55abaa
SSDEEP

3072:2tRD68wb9z/gx3/a5HkJznF34J05uwxDUj1Zy:8D68wBzGaoh38TT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.035b4464a51009844495feab94717160_JC.exe

Files

NEAS.035b4464a51009844495feab94717160_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ